agisoft-delighter
LOW
maintainer dobedobedo
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a prebuilt binary tarball from Agisoft's official S3 bucket, which is plausibly their own release infrastructure; the package installs only data and wrapper scripts, with no evidence of malicious behavior or remote code execution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt binary tarball from Agisoft's official S3 bucket, which is plausibly their own release infrastructure; the package installs only data and wrapper scripts, with no evidence of malicious behavior or remote code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Yu-Hsuan Tu <dobe0331 at gmail dot com>
2
_pkgname=delighter
3
pkgname=agisoft-${_pkgname}
4
pkgver=2.3.2
5
pkgrel=1
6
pkgdesc="A free stand-alone tool designed to remove shadows from model textures"
7
arch=('x86_64')
8
url="https://www.agisoft.com/"
9
license=('custom:Agisoft EULA' 'custom')
10
makedepends=('imagemagick')
11
provides=('agisoft-delighter')
12
options=('!strip')
13
install=${pkgname}.install
14
source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"
15
"agisoft-delighter-icon-encoded.txt")
16
sha256sums=('ff3317b73af0d2bb1bb958885fbc3705d57cc35776ef5727a5439797b118d55a'
17
'6cc74a4ac8ec776ebea5eff2383ddaf2520bb0a47f7d2135a62277dbd9206921')
18
19
build() {
20
# Create desktop entries
21
echo "[Desktop Entry]
22
Type=Application
23
Name=Agisoft De-Lighter
24
Comment=Remove shadows from model textures
25
Exec=agisoft-delighter
26
MimeType=application/agisoft.dlz
27
Icon=agisoft-delighter
28
Terminal=false
29
Categories=Science;ImageProcessing" > "$srcdir/agisoft-delighter.desktop"
30
31
# Create Delighter MIME type file
32
echo '<?xml version="1.0" encoding="UTF-8"?>
33
<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
34
<mime-type type="application/agisoft.dlz">
35
<comment>Delighter Projects</comment>
36
<icon name="application-agisoft-dlz"/>
37
<glob-deleteall/>
38
<glob pattern="*.dlz"/>
39
</mime-type>
40
</mime-info>' > "$srcdir/${pkgname}-mime.xml"
41
42
# Create 128x128 application icons
43
base64 -d "$srcdir/agisoft-delighter-icon-encoded.txt" > "$srcdir/agisoft-delighter_128.png"
44
45
# Create 128x128 mime icons
46
cp "$srcdir/agisoft-delighter_128.png" "$srcdir/application-agisoft-dlz_128.png"
47
48
# Create icons for other resolutions
49
for _res in 16 32 48 64; do
50
magick "$srcdir/agisoft-delighter_128.png" -resize ${_res}x${_res} "$srcdir/agisoft-delighter_${_res}.png"
51
magick "$srcdir/application-agisoft-dlz_128.png" -resize ${_res}x${_res} "$srcdir/application-agisoft-dlz_${_res}.png"
52
done
53
54
# Create executables for /usr/bin
55
echo "#!/bin/bash
56
/opt/agisoft/${_pkgname}/delighter.sh \$@" > "$srcdir/agisoft-delighter"
57
}
58
59
package() {
60
# Move extracted folder to opt
61
cd "$pkgdir"
62
mkdir -p "opt/agisoft"
63
mv "${srcdir}/${_pkgname}" "${pkgdir}/opt/agisoft/"
64
65
# Install licenses
66
cd opt/agisoft/${_pkgname}
67
install -Dm644 eula.txt "$pkgdir/usr/share/licenses/$pkgname/eula.txt"
68
mv licenses "$pkgdir/usr/share/licenses/$pkgname"
69
rm eula.txt
70
71
# Move desktop entries
72
mkdir -p "${pkgdir}/usr/share/applications/"
73
mv "${srcdir}/agisoft-delighter.desktop" "${pkgdir}/usr/share/applications/"
74
75
# Create MIME type
76
mkdir -p "${pkgdir}/usr/share/mime/packages"
77
mv "${srcdir}/${pkgname}-mime.xml" "${pkgdir}/usr/share/mime/packages"
78
79
# Move icons
80
for _res in 16x16 32x32 48x48 64x64 128x128; do
81
mkdir -p "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/"
82
mkdir -p "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/"
83
mv "$srcdir/agisoft-delighter_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/agisoft-delighter.png"
84
mv "$srcdir/application-agisoft-dlz_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/application-agisoft-dlz.png"
85
done
86
87
# Create executables in /usr/bin
88
install -Dm755 "$srcdir/agisoft-delighter" "$pkgdir/usr/bin/agisoft-delighter"
89
90
# Set correct permission
91
chmod -R g=u "$pkgdir/opt/agisoft/${_pkgname}"
92
chmod -R o=u "$pkgdir/opt/agisoft/${_pkgname}"
93
chmod -R g-w "$pkgdir/opt/agisoft/${_pkgname}"
94
chmod -R o-w "$pkgdir/opt/agisoft/${_pkgname}"
95
chmod -R g=u "$pkgdir/usr/share/licenses/$pkgname/licenses"
96
chmod -R o=u "$pkgdir/usr/share/licenses/$pkgname/licenses"
97
chmod -R g-w "$pkgdir/usr/share/licenses/$pkgname/licenses"
98
chmod -R o-w "$pkgdir/usr/share/licenses/$pkgname/licenses"
99
}
100
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |